SS
Product
Simatic S7-1200 Firmware
9
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add Simatic S7-1200 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-13815 | 7.5 | Dec 13 | A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6) Affected: All versions, or not specified |
| CVE-2017-12741 | 7.5 | Dec 26 | Specially crafted packets sent to port 161/udp could cause a denial of service condition Affected: All versions, or not specified |
| CVE-2019-13945 | 6.8 | Dec 12 | A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl Affected: All versions, or not specified |
| CVE-2017-2681 | 6.5 | May 11 | Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product Affected: before 4.2.1 |
| CVE-2017-2680 | 6.5 | May 11 | Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2) Affected: before 4.2.1 |
| CVE-2013-2780 | – | Apr 22 | Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to UDP port 161 (aka… Affected: before 4.0 |
| CVE-2013-0700 | – | Apr 22 | Siemens SIMATIC S7-1200 PLCs 2.x and 3.x allow remote attackers to cause a denial of service (defect-mode transition and control outage) via crafted packets to TCP port 102 (aka… Affected: before 4.0 |
| CVE-2012-3040 | – | Oct 10 | Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a… Affected: 2.0.0 before 3.0.2 |
| CVE-2012-3037 | – | Sep 25 | The Siemens SIMATIC S7-1200 2.x PLC does not properly protect the private key of the SIMATIC CONTROLLER Certification Authority certificate, which allows remote attackers to spoof… Affected: 2.0.0 before 3.0.0 |
Showing 9
